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IN THE CLAIMS 



Please re-write the claims to read as follows: 



1 1 . (Currently Amended) Apparatus for tightly-coupling hardware data encryption 

2 functions with software-based protocol decode processing within a pipelined processor of 

3 a programmable pfccessing engine in a network switch, the apparatus comprising: 

4 an encryption execution unit contained within the pipelined processor; 

5 an ALU, in response toteading an op-code, enables the encryption execution unit 

6 to read data from a memory shared o^the ALU and the pipelined processor, and for the 

7 encryption execution unit to process the oka read from the shared memory; and 

8 a multiplexer to select as an output a [[tkte]] result of processing by the en- 

9 cryption execution unit rather than a result of ALU processing. 
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2\ (Original) The apparatus of Claim 1 wherein the encryption execution unit is an en- 
cryption tightly coupled state machine (TCSM) unit that is selectively invoked within the 
pipelined processor. 



3. (Currently Amended) The apparatus of Claim 2 [[wherein a software portion of the 
interface comprises]] ftirther comprising; 

native encryption opcodes provided within an instruction set of the pipelined 
processor to enable selective access to the encryption TCSM unit by software . 



4. (Currently Amended) The apparatus of Claim 3 [[wherein the resources include]] fur- 
ther comprising: \ 
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plurality of busses internal to the pipelined processor and wherein a hardware 
portion ofithe interface allows the encryption TCSM unit to utilize the internal buses in 
response toMecode processing of the native encryption opcodes. 



5. (Currently Amended\ The apparatus of Claim 4 wherein the pipelined processor is a 
microcontroller core (TmC) processor having a multi-stage pipeline architecture that in- 
cludes an instruction fetch s^age, an instruction decode stage, an execution stage and a 
memory write-back stage. 



6. (Original) The apparatus of Claim 5 wherein the TMC processor further includes an 
arithmetic logic unit, at least one internal register, an instruction fetch and decode unit 
and the encryption TCSM unit organized as a clata path. 
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7.\Original) The apparatus of Claim 5 wherein the encryption TCSM unit comprises a 
data encryption standard (DES) functional component cooperatively coupled to a sub-key 
generation functional component. 



8. (Original) The apparatus of Claim 7 wherein the DES functional component com- 
prises state machine hardware used to execute each round of a DES function. 



9. (Currently Amended) The apparatus of Claim 7 [[wherein]] further comprising: 



the sub-key generation functional component comprises state machine hardware 
that generates a sub-key as needed for each round oXa [[the]] DES function. 
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1 lOVPreviously Presented) A method for tightly-coupling hardware data encryption 

2 functions with software-based protocol decode processing within a pipelined processor of 

3 a programmable processing engine in a network switch, the method comprising the steps 

4 of: \ 

5 providing an encryption execution unit within the pipelined processor; 

6 enabling\by an ALU in response to reading an op-code, the encryption execution 

7 unit to read data from a memory shared by the ALU and the pipelined processor, and for 

8 the encryption execution unit to process the data read from the memory; and 

9 selecting as output the result of processing by the encryption execution unit rather than 

10 selecting results from the ALU. 



k d of Claim 10 [[wh< 

encryption opcodes 
6 \ 
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J[wherein the step of selectively accessing comprises the step of]] 

l\ 

issumg the native encryption opcodes directly to the encryption execution unit to 
substantially reduce encryption setup latency. 



12. (Original) The method of Claim 1 1 further comprising the steps of, wherein the 
pipelined processor is a microcontroller core (TMC) processor having a multi-stage pipe- 
line architecture that includes an instruction decode stage and an execution stage: 
decoding the native encryption opcodes at the instruction decode stage; and 
in response to the step ofdecoding, invoking the encryption execution unit to per- 
form encryption/decryption functions at the execution stage. 



13. (Original) The method of Claim 12 further comprising the steps of, wherein the en 



cryption/decryption functions are performed on plaintext stored at the network switch: 

protocol processing of protocols contained in the plaintext to determine an appro- 
priate encryption algorithm; 

upon determining the appropriate encryption algorithm, immediately starting an 
operation to fetch initial keys needed to perform the encryption/decryption functions; and 
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u^pn fetching the keys, providing the keys to the encryption execution unit within 
the TMC processor. 

14. (Original) ThAmethod of Claim 13 further comprising: 
[[wherein the resources include]] 

including a plurality of high-performance busses internal to the TMC processor; 

and \ 

[[, and wherein the step of invoking comprises the step of:]] 

accessing the internal busies [[through the integrated interface]] to simultane- 
ously load an encryption key and stbre a previous encryption result. 

15. (Currently Amended) The method of Claim 12 further comprising the step of, 
wherein the [[the]] encryption execution unit is an encryption tightly coupled state ma- 
chine (TCSM) unit: \ 

initializing the encryption TCSM unit in response to execution of a first instruc- 
tion that defines the form of operation to be performed. 
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1 16\(Original) The method of Claim 15 wherein the encryption TCSM unit comprises a 

2 data eruryption standard (DES) functional component cooperatively coupled to a sub-key 

3 generation functional component and wherein the step of initializing comprises the steps 

4 of: 

5 decoding, a first portion of the first instruction to initialize the DES functional 
component; and 

7 decoding a sekmd portion of the first instruction to initialize the sub-key genera- 

8 tion functional component. 



1 17. (Original) The method of Claim 16 further comprising the step of: 

2 executing a second instruction hawng a micro-opcode field containing a native 

3 encryption opcode that specifies loading an mitial key from a memory into the sub-key 

4 generation functional component of the encryption TCSM unit. 



i 18. (Currently Amended) The method of Claim 17 further comprising the step of: 
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2 performing a DES function on a [[the]] plaintext in response to execution of a 

3 third instruction having a micro-opcode field containing a native encryption code that 

4 specifies loading of the plaintext into the DES functional component of the encryption 

5 TCSM unit ana initiating DES operations; and 

6 upon completing the DES operations, storing a ciphertext result [[results]] in 

7 an internal registencoupled to the DES functional component. 



1 19. (Original) The method ofOaim 18 further comprising the step of: 

2 executing a fourth instruction to store the ciphertext results contained in the inter- 

3 nal register to a location in the memory. 



1 20. (Previously Presented) A programmable processing engine of a network switch 

2 comprising: 

3 an input header buffer; 

4 an output header buffer; and 
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a pWality of processing complex elements symmetrically arrayed into rows and 
columns that arte embedded between the input header buffer and an output header buffer, 
each processing coniplex element comprising a microcontroller core having an encryp- 
tion tightly coupled state machine (TCSM) unit that is selectively invoked in response to 
the microcontroller reading an op-code; and 

a selector to select an\utput from either the microcontroller OR the TCSM. 



21. (Currently Amentt^d) A pipelined processor in a network switch, the processor 
comprising: \ 

an ALU internal to the processor responsive to a first set of opcodes; 

an encryption execution unirinternal to the processor having an encryption tightly 
coupled state machine (TCSM) responsive to a second set of opcodes, the ALU, in re- 
sponse to an op-code, transferring processing to the encryption execution unit to process 
in response to said second set of opcodes; \ 

a multiplexer to select output from the ALCi OR from the encryption execution 
unit. \ 
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(Previously Presented) The processor of Claim 21, wherein the processor is a mi- 
crocontroller core (TMC) processor and further comprises: 
an instruction fetch stage; 
ato instruction decode stage to decode an instruction fetched by the instruction 
fetch stage;> 

an execution stage to execute a decoded instruction; and 
a memoryWrite-back stage to write a result of said execution stage to memory. 



1 23. (Currently Amended) r|je processor of Claim 21, further comprises [[com- 

2 prise]]: 

3 one or more internal registers; 

4 a bus operatively connecting [[thV]] one or more internal registers to both the 

5 ALU and the encryption execution unit; arw 

6 a multiplexer having inputs froin both the ALU and the encryption execu- 

7 tion unit, the multiplexer outputting a selected input. 
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The processor of Claim 21, wherein the encryption 



(Previously Presented) 
2 TCS^l unit comprises: 

data encryption standard (DES) functional component cooperatively coupled to 
4 a sub-key generation functional component. 



1 25. (Previously Presented) The processor of Claim 24, wherein the DES functional 

2 component comprises: 

3 a state machine that executes each round of a DES function. 



26. (Currently Amended) The processor of Claim 24, wherein the sub-key generation 
functional component comprises: 

a state machine that generates a sub-kfy as needed for each round of a [[the]] 
DES function. 
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1 V7. (Currently Amended) A method for providing encryption Sanctions within a pipe- 

2 lin^d processor in a network switch, the method comprising the steps of: 

associating a first set of opcodes with an ALU internal to the processor; 
ssociating a second set of opcodes with an encryption execution unit internal to 

5 the processor [[process]] or having an encryption tightly coupled state machine 

6 (TCSM), whetein protocol processing operations are performed by the ALU and encryp- 

7 tion operations ate performed by the encryption execution unit in response to said second 

8 set of opcodes; and 

9 transferring by\he ALU, in response to an op-code, processing to the encryption 

10 execution unit to process Encryption operations in response to said second set of op- 
n codes; 



12 



selecting output from the\ALU OR from the encryption execution unit. 



1 28. (Currently Amended) The method ot\£laim 27, further comprises [[comprise]] 

2 the step of: 

3 providing one or more internal registers; 

4 providing a bus operatively connecting the one\>r more internal registers to both 

5 the ALU and the encryption execution unit; 
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6 \ providing a multiplexer having inputs from both the ALU and the encryption exe- 

7 cution unjt, the multiplexer outputting a selected input. 

29. (Previous!^ Presented) The method of Claim 27 further comprising the step 

2 of: \ 

3 initializing the encryption TCSM unit in response to a first instruction that defines 

4 a form of operation to be performed. 



1 30. (Currently Amended) The method ©f Claim 29, wherein the step of initializing com- 

2 prises the steps of: \ 

3 decoding a first portion of the first instruction to initialize a [[the]] DES func- 

4 tional component; and \ 

5 decoding a second portion of the first instruction to initialize a [[the]] sub-key 

6 generation functional component. \ 
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1 3 recurrently Amended) The method of Claim 27, further comprising the steps of: 

2 executing a second instruction including an encryption opcode that specifies 

3 loading an roitial key from a memory into a [[the]] sub-key generation functional com- 

4 ponent of the T\CSM unit. 

1 32. (Currently Amended) Tne method of Claim 27, further comprising the steps of: 

2 performing a DES fiinctiork in response to execution of a third instruction having a 

3 field containing an encryption opcode^that specifies loading plaintext and initalizing 

4 [[initialing the]] a DES operation [[operations]]. 

16 
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1 33. (Currently Amended) A computer readable media, comprising: 

2 \ said computer readable media containing instructions for execution in a processor 

3 for the practice of the method o£ [[claim 10 or claim 27 or claim 40]] 

providing a tightly-coupling hardware data encryption function with software- 

5 based protocoPdecode processing within a pipelined processor of a programmable proc- 

6 essing engine in ^network switch; 

7 providing amencryption execution unit within the pipelined processor; 

8 enabling, by amALU in response to reading an op-code, the encryption execution 

9 unit to read data from a memory shared bv the ALU and the pipelined processor, and for 

10 the encryption execution uirit to process the data read from the memory; and 

n selecting as output the result of processing by the encryption execution unit rather 

12 than selecting results from the ALaJ. 
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34v (Currently Amended) Electromagnetic signals propagating on a computer net- 
work\ompri sing : 

sata electromagnetic signals carrying instructions for execution on a processor for 
the practice of the method of a [[claim 10 or claim 27 or claim 40]] 

providing V tightly-coupling hardware data encryption function with software- 
based protocol decoate processing within a pipelined processor of a programmable proc- 
essing engine in a network switch; 

providing an encryption execution unit within the pipelined processor; 

enabling, by an ALU imresponse to reading an op-code, the encryption execution 
unit to read data from a memory sqared by the ALU and the pipelined processor, and for 
the encryption execution unit to process the data read from the memory; and 

selecting as output the result of processing by the encryption execution unit rather 

than selecting results from the ALU. \ 



35. (Previously Presented) A roiter, comprising: 

a processor having an ALI J for processing op-codes and a tightly coupled state 
machine (TCSM) for performing encryption processing; 

a shared memory for providing data to either the ALU or the TCSM; 
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the ALU, in response to reading an op-code, transferring processing to the TCSM, 
and the TCSM performing encryption processing on data read from the shared memory; 
a selector to select as output results from the ALU OR results from the TCSM. 



36. (Previously Presented) The apparatus of Claim 35, further comprising: 
the selector is a multiplexer. 



37. (Previously Presented) The apparatus of Claim 35, further comprising; 

the ALU selects whether the ALU or the TCSM reads data from the memory. 



38. (Previously Presented) The apparatus of Claim 35, further comprising: 

the TCSM performs DES data encryption sta\dard encryption processing. 



39. (Previously Presented) The apparatus of Claim 35, further comprising: 
a sub-key generation component to provide a key to the \£ CSM. 
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^. (Previously Presented) A method for operating a router, comprising: 

providing a processor having an ALU for processing op-codes and a tightly cou- 

3 pled sta\e machine (TCSM) for performing encryption processing; 

4 reading data from a shared memory by either the ALU or the TCSM; 

5 transfixing processing by the ALU, in response to reading an op-code, to the 

6 TCSM, and the TC^SM performing encryption processing on data read from the shared 

7 memory; 

8 selecting as outpiAresults from the ALU OR results from the TCSM. 



1 41. (Previously Presented) The method qf Claim 40, further comprising: 

2 using a multiplexer for selecting as output results from the ALU OR results from 

3 the TCSM. 



1 42. (Previously Presented) The method of Claim 40, further comprising; 

2 selecting by the ALU whether the ALU or the TCSM\eads data from the mem- 



ory. 
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^(Previously Presented) The method of Claim 40, further comprising: 

performing DES data encryption standard encryption processing by the TCSM. 



44. (Previously Presented) The method of Claim 40, further comprising: 
providing key to\the TCSM by a sub-key generation component. 



45. (Previously Presented) A router, comprising: 

means for providing a processor having an ALU for processing op-codes and a 
tightly coupled state machine (TCSM) for performing encryption processing; 

means for reading data from a shared memory by either the ALU or the TCSM; 

means for transferring processing by the ALGL in response to reading an op-code, 
to the TCSM, and the TCSM performing encryption pressing on data read from the 
shared memory; 

means for selecting as output results from the ALU ORNresults from the TCSM. 
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46. (Previously Presented) The apparatus of Claim 45, further comprising: 
\ means for using a multiplexer for selecting as output results from the ALU OR 
results from the TCSM. 



47. (Previously Presented) The apparatus of Claim 45, further comprising; 

means for selecting by the ALU whether the ALU or the TCSM reads data from 
the memory. \ 

48. (Previously Presented) The app aratus °f Claim 45, further comprising: 

means for performing DES (data encryption standard encryption processing by the 
TCSM. \ 



49. (Previously Presented) The apparatus of Clarm 45, further comprising: 

means for providing key to the TCSM by a sub-key generation component. 
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Please add new claims\50, et seq., as follows: 

1 50. (toew) A computer readable media, comprising: 

2 said\omputer readable media containing instructions for execution in a processor 
for the practice of the method of providing encryption functions within a pipelined proc- 

4 essor in a network switch, having the steps, 

s associating a first sbt of opcodes with an ALU internal to the processor; 

6 associating a second servof opcodes with an encryption execution unit internal to 

7 the process or having an encryptiorkightly coupled state machine (TCSM), wherein pro- 

8 tocol processing operations are performed by the ALU and encryption operations are per- 

9 formed by the encryption execution unit in\esponse to said second set of opcodes; and 

10 transferring by the ALU, in response to\n op-code, processing to the encryption 
n execution unit to process encryption operations in response to said second set of op- 

12 codes; \ 

B selecting output from the ALU OR from the encryptiorKexecution unit. 
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1 >1 . (New) Electromagnetic signals propagating on a computer network, comprising: 

2 \ said electromagnetic signals carrying instructions for execution on a processor for 

3 the practice of the method of providing encryption functions within a pipelined processor 

4 in a network switch, having the steps, 

5 associaMng a first set of opcodes with an ALU internal to the processor; 

6 associating^ second set of opcodes with an encryption execution unit internal to 

7 the process or havingVi encryption tightly coupled state machine (TCSM), wherein pro- 

8 tocol processing operations are performed by the ALU and encryption operations are per- 

9 formed by the encryption execution unit in response to said second set of opcodes; and 

10 transferring by the ALU, in response to an op-code, processing to the encryption 

11 execution unit to process encryption operations in response to said second set of op- 

12 codes; \ 

13 selecting output from the ALU\OR from the encryption execution unit. 

1 52. (New) A computer readable media, comprising: 

2 said computer readable media containing instructions for execution in a processor 

3 for the practice of the method of operating a router, having the steps, 
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^providing a processor having an ALU for processing op-codes and a tightly cou- 

5 pled state machine (TCSM) for performing encryption processing; 

6 reading data from a shared memory by either the ALU or the TCSM; 

7 transferring processing by the ALU, in response to reading an op-code, to the 

8 TCSM, and the^TCSM performing encryption processing on data read from the shared 

9 memory; 

selecting asWitput results from the ALU OR results from the TCSM. 



10 



1 53. (New) Electromagnetic signals propagating on a computer network, comprising: 

2 said electromagnetic signals carrying instructions for execution on a processor for 

3 the practice of the method of operating a router, having the steps, 

4 providing a processor having m ALU for processing op-codes and a tightly cou- 

5 pled state machine (TCSM) for performing encryption processing; 

6 reading data from a shared memoryNby either the ALU or the TCSM; 

7 transferring processing by the ALU, in response to reading an op-code, to the 

8 TCSM, and the TCSM performing encryption processing on data read from the shared 

9 memory; 

selecting as output results from the ALU OR faults from the TCSM. 
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